Boss reading E-mail

[The_Vulcan]

My girlfriend thinks her boss is reading their e-mail.

She would like to bait him to find out for sure.

She wants to send him an email with a link on it that he will want to click.

This will be to a webpage that will record date / time / ip anything else one can pull off his mac.

Does anyone have any code to do this ?

PHP/MYSQL/FRONTPAGE etc etc ?

[Cello]

Won't the website stats record that a particular webpage has been accessed and at what time, etc?

Trouble is that there is no way that you can prove it was him - it is only likely to be him.

What you could do is put something on his machine, like a cookie, which proves absolutely that he accessed that webpage.

But bear in mind that here in the UK, employers have a legal right to monitor email activity - it may be the same in Oz.

Safest way of course is not to use the company email system for anything personal - use a web email service instead ;)

[CanadianGuy]

Yep I think it's the same here in the great white north. You have to think of it as the companies email and not yours. That's unfortunate for your girlfriend though. I know I'd hate to have anyone looking over my shoulder.

[The_Vulcan]

Yeah we know he can if he wants.... but he hasn't told anyone that he does.

I was going to set up a page at Lycos..... the ods of somone going to that one page with no content is zero.

The e-mail will say something regarding managers spying on employees with a link.
Once he open the page it will show him his IP address and inform him that his vist to this page has been recorded.

He will know he was set up.... and everyone in the company will know for sure that he is spying.

If I get his IP address I will know it was him for sure as no one else with that IP address will vist the page.

And my g/f uses her yahoo account when ever she wants to say something that shouldn't be read.

[DarkChild]

imma just give you an idea:
why don't you let someone send you some mails, just some random everyday talk in it and at the end put the question: does your boss still read your e-mail? in a big font. do that a couple of times (let's say 2 weeks or so, every day) and just wait for his reaction. if he reads your mails, he most certainly will react differently and then he knows you know. if he doesn't read it, no harm is caused whatsoever, just delete them...

[Digitalosophy]

most companies filter emails for certain words. they might now actually read her emails..

however there are tons of scripts here, if not i can write a qucky for you when i get home again,

[The_Vulcan]

hey thanks...

At the moment I have tried this....


<?php
session_start();
if(!session_is_registered('counted')){
$agent = $_SERVER['HTTP_USER_AGENT'];
$uri = $_SERVER['REQUEST_URI'];
$user = $_SERVER['PHP_AUTH_USER'];
$ip = $_SERVER['REMOTE_ADDR'];
$ref = $_SERVER['HTTP_REFERER'];
$dtime = date('r');

if($ref == ""){
$ref = "None";
}
if($user == ""){
$user = "None";
}

$entry_line = "$dtime - IP: $ip | Agent: $agent | URL: $uri | Referrer: $ref | Username: $user n";
$fp = fopen("logs.txt", "a");
fputs($fp, $entry_line);
fclose($fp);
session_register('counted');
}
?>

However it looks like Lycos wont give me access to the text file, and I dont see how I can CMOD it.

I have a site with my ISP however they don't support PHP or SQL, they only support front page extensions.

[Digitalosophy]

i could upload it to my webserver if you'd like. just pm me the page

[The_Vulcan]

Thanks for the offer... It's mighty nice of you :)

But it's not worth wasting your time over..... I will play with it a little longer and give up if I can't find away around it.

I will see if I can just grab the PHP information and post it to my hotmail account.
hmmmm, I have never used post where the user didn't press submit. :)

[The_Vulcan]

Well this is all I could come up with.....
I tested it and it didn't work..... :P

<?php
session_start();
if(!session_is_registered('counted')){
$agent = $_SERVER['HTTP_USER_AGENT'];
$uri = $_SERVER['REQUEST_URI'];
$user = $_SERVER['PHP_AUTH_USER'];
$ip = $_SERVER['REMOTE_ADDR'];
$ref = $_SERVER['HTTP_REFERER'];
$dtime = date('r');

if($ref == ""){
$ref = "None";
}
if($user == ""){
$user = "None";
}

$entry_line = "$dtime - IP: $ip | Agent: $agent | URL: $uri | Referrer: $ref | Username: $user n";
$fp = fopen("logs.txt", "a");
fputs($fp, $entry_line);
fclose($fp);
session_register('counted');
}
?>


<?php
$sendTo = "????????@hotmail.com (????????@hotmail.com)";
$subject = "Got the Boss";
mail($sendTo, $subject, $message, $headers, $agent, $uri, $user, $ip, $ref, $dtime);
?>



I am to tired right now to try and figure out what I have done wrong seening as I don't know PHP.

I think it is close...... I will look at again tomorrow.

EDIT:
I placed the above code in PHP tags and it went to rubbish... :(

[mjULTRA]

why dont you have your girlfriend write a 'private' letter to a friend explaining how bad she wants to jump the bosses bones, and have wild monkey love with him all over the office copier.. Then you can gauge his reaction, and possible lure him into a lofty sexual harrassment suit if he acts on it.. haha, just an idea... it would work, though..

[reverendflash]

In America, playing a game with your boss like above, could result in the termination of your girlfriend, depending on the company of course.

Personally, I'd ignore it, maybe drop some fake tidbit that he'd have to talk about, and then wait for it to get back to her, if she wanted to confirm the reading that is.

Otherwise, as you said, just use yahoo, etc. for any "personal" email.

[Jubba]

You can't do something like that on Lycos as far as i know. You need access to the file in order to CHMOD it and I don't believe that Lycos lets you do that. However if they give you access to a database, just use that instead. I would just take Revs advice anyway...

[CanadianGuy]

why dont you have your girlfriend write a 'private' letter to a friend explaining how bad she wants to jump the bosses bones, and have wild monkey love with him all over the office copier.. Then you can gauge his reaction, and possible lure him into a lofty sexual harrassment suit if he acts on it.. haha, just an idea... it would work, though..

:trout: :trout: :trout:

[The_Vulcan]

Yeah my g/f is not the type to play games like that..........

And as Rev said, she wold more than likley end up being fired.

This is not new, they have thought for a long time that he has been reading them, they have almost felt that things have been said that indicates he might have read something, but no enough to know for sure.

He is always in his office and often reduces windows when people walk in... (obvioulsy I say he is looking at ****), but he always keeps his office door locked, so no one can even get on his computer when he is not there.

Yeah Lycos~tripod lets you have one mySQL database.
Since my PHP to SQL is not very good I was looking for a quick way.

I will just have to bite the bullet and do it that way I guess....

[Hans Kilian]

You could also have the PHP script send you a mail with the info you want (IP address etc.) when the secret page is accessed.

That should be simpler to code.

[The_Vulcan]

Yeah I know...... the blue code a couple of posts ups was my attempt at it which didn't work.

Can you see the error in the code ?

[Hans Kilian]

Yes I can. The mail function only takes 4 parameters. The first four you've listed look right.

You need to stick the information you want to send in the $message variable. Something like

$message = "$ipaddress\n";
$message .= "$agent\n";

and so on...

[λ]

http://gnupg.org/

;)